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Security  Research 

EU  Research  for  Security 

•  Introduction 

•  Security  research  in  FP  /  1ST 

•  Towards  a  new  European  Security  Research 
Programme  (ESRP)  in  2007 

-  Group  of  Personalities  (GoP) 

-  Communication  «  Security  Research-  the  Next 
Steps  » 

-  Preparatory  Action  for  Security  Research  (PASR) 

•  Next  Steps 
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Security  Research 


A  comprehensive  EU  approach  to  Security 


Economic,  business  and 
social  aspects  of  security 
in  Information  Society 

Cyber-crime,  Internal 
security 

External 

security  /  defence 

•  Electronic  Signature 

•  Data  protection  in  elect,  com. 

•  Network  &  information 
security  (Cl  I P) 

•  I  dentity  and  Privacy  mgt 

•  Culture  of  Trust  and  Security 

•  ENISA 

•  digital  right  management, 
biometrics,  smart  card,  I  Pv6, 

•  Framework  Decision  on  attacks 
against  information  systems 

•  Lawful  interception 

•  G8CIP 

•  e- identification/ e- 
authentication 

•  biometrics  in  visas  and 
residence  permit 

•  Dual  use  technology  research 

•  Crisis  management 

•  Peace  keeping 

•  State  institution  building 

Preparatory  Action  Security  Research 

Research  and  Technology 

FP6,  FP7  (Security  Research,  ICT,  Space,  etc.) 
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Security  Research  ■ 

Current  1ST  Research  Activities: 
network  and  information  security 

...  In  an  Ambient  Intelligent  environment 

-  Dependability 

-  Anomaly  and  attacks  detection/avoidance 

-  Protection  of  digital  assets 

-  Critical  Information  Infrastructure  Protection  & 
interdependencies 

-  Cryptography,  electronic  signatures  and  PKI 

-  Mobility,  wireless  and  reconfigurability 

-  Next  generation  networks  and  computing  models 

-  Smart  Cards  and  Access  technologies 

-  Biometrics 

-  Pre-normative/standards  research 
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Security  Research 

Why  Multidisciplinary  Mission-oriented 
European  Security  Research  ? 

*  “A  Secure  Europe  in  a  Better  World  »(Dec.  2003):  new 
threats,  more  diverse  and  iess  predictable 

*  European  security  cuiture 

*  Credible  EU  technology  basis  and  competitive  security 
industry 

*  Synergies:  civii  -  military  research;  pubiic  -  private  use 

*  Coherence  &  coordination;  reduce  fragmentation  & 
duplication 

*  improve  interoperabiiity 

*  increase  EU  investments  in  RTD:  towards  3%  for  growth 
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Security  Research 

Group  of  Personalities  (GoP) 

•  2003:  Commission  initiative;  27  Personalities  from  politics, 
European  Parliament,  governments.  Industry,  Research  & 
Academia;  chaired  by  Commissioners  Busquin  and  Liikanen 

•  GoP  main  recommendations 

-  Coordinate  national,  intergovernmental  and  community  RTD  efforts 

-  Bridge  gap  between  civil  &  defence  security  research. 

-  Establish  European  Security  Research  Advisory  Board 

-  Launch  European  Security  Research  Programme  (ESRP)  in  FP7 

•  In  line  with  EU  security  strategy 

•  ...while  respecting  individual  rights  and  liberties  and  democratic  values 

•  In  good  cooperation  with  EU  Defence  Agency  and  all  stakeholders 
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Security  Research 

EC  Communication 
«  Security  Research-The  Next  Steps  » 

•  Adopted  7  September  2004 

•  Subscribes  to  main  thrust  of  GoP  report 

•  Actions  in  4  domains: 

-  Consultation  and  cooperation  with 
stakeholders  (ESRAB) 

-  Launch  ESRP 

-  Effective  institutional  setting  (EDA) 
-Appropriate  governance  structure 
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Security  Research 

Consultation  &  Cooperation 

•  European  Security  Research  Advisory  Group 
(ESRAB) 

Experts  from:  users,  industry,  research  organisations 

-  Advise  on  content  and  impiementation  of  ESRP 

-  Establish  user  needs 

-  Encourage  cooperation  between  Member  States 
(IPR,  information  classification  and  protection) 

•  Coordinate  ESRP  with  other  research  at 
Community,  intergovernmental,  national  level  or 
with  international  organisations  (incl.  NATO, 
OECD) 
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ESRP  from  2007 


•  Draft  ESRP  in  spring  2005  (content,  financial 
plan,  rules  of  participation)  as  one  specific 
programme  of  FP7 

•  Give  ESRP  an  appropriate  level  of  funding 
(additional  to  existing  RTD  funding  in  FP),  thus 
contributing  to  the  3%  GDP  Lisbon 

•  Decision  by  EP  and  Council  on  FP7  end  2006 
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Security  Research 

An  effective  institutional  setting 

•  In  line  with  EU  Security  Strategy  and  CSFP,  ESDP 

•  Cooperation  and  Synergies  with  the  European 
Defence  Agency  (EDA) 

-  Commission  to  be  part  of  the  Steering  Board  of  EDA 

-  Administrative  arrangement  to  organise  working 
relations  with  EDA 

-  Possibie  EC  contribution  to  specific  EDA  projects 

-  Roie  of  EDA  in  ESRP  Advisory  and  management 
structure 
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Security  Research 

ESRP  governance  structure 

•  Effective  management,  with  involvement  of 
industry,  research  and  (public)  user  stakeholders, 
use  EC  experience  in  managing  RTD  Programmes 

•  Appropriate  contracts,  participation  and  funding 
mechanisms  (e.g.  classified  information; 
civil/military  application) 

•  Use  specific  experience  to  be  gained  from  the 
Preparatory  Action 
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Preparatory  Action  for  Security  Research 


(PASR) 


•  An  initiative  of  the  European  Commission 

•  Outside  the  6th  framework  programme,  but 
with  procedures  adapted  from  FP6 

•  Planned  duration  of  3  years  (2004-2006) 

•  A  totai  planned  budget  of  €  65  Mio,  of  which 
€  15  Mio  for  2004 

•  Funding  up  to  75% 

•  2  types  of  activities:  projects  &  supporting 
activities 
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Security  Reseairch 

PASR:  Mission  Priorities 

•  Improving  situation  awareness 

•  Optimising  security  and  protection  of  networked 
systems 

•  Protecting  against  terrorism  (including  bio¬ 
terrorism  and  incidents  with  biological,  chemical 
and  other  substances) 

•  Enhancing  crisis  management 

•  Achieving  interoperability  and  integrated 
systems  for  information  and  communication 
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Security  ReBearch 

PASR  Characteristics 

•  Projects  (1-2  years) 

-  Mission-oriented  or  Related  to  Interoperability  or  Citizen-oriented 

-  Tangible  results 

-  Multidisciplinary 

-  Involving  final  users 

•  Supporting  activities  (0.5  -  3  years) 

-  Standardisation  activities 

-  Dissemination,  networking  and  coordinating  activities 

-  Activities  relevant  to  the  need  to  improve  the  security  of  the  European 
citizen  and  society 

-  RTD  roadmaps 
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Security  Research 

PASR  2004  -  First  Call  for  Proposals 

•  Call:  open  31  March,  closed  23  June 

•  Received:  179  proposals,  of  which  173  are  eligible 

-  50  supporting  activities 

-  123  projects 

•  Evaluation:  5  to  10  July,  with  assistance  of  57 
evaluators,  mainly  from  Member  States 

•  Retained  for  contract  negotiations: 

-  7  projects  (on  THz  detection,  CBRN,  training,  SecCom, 
surveiilance,  space,  criticai  infra) 

-  5  supporting  activities  (crisis  management,  research 
roadmapping  etc.) 
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PASR-  Next  Steps 


•  Pursue  Preparatory  Action  implementation  (2004- 
2006) 

•  Establish  a  European  Security  Research 
Advisory  Board  (ESRAB) 

•  Develop  cooperation  and  synergies  with  EDA 

•  Prepare  the  future  ESRP 

•  Initiate  wide  consultation  of  security  research 
stakeholders,  incl.  NATO  bodies 

•  Establish  contacts  with  US  DHS 
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Security  Reseairch 

FP7/IST  -  Towards  resilience  and  plasticity 


assured  Service  and  Informatioi 
in  Information  Socieb 


SERVICE 

LEVEL 


endemic 
vulnerabilities, 
auditable 
security 
properties 

Dynamic  security  policies;  epidemiological  se^ 
awareness  &  disaster  avoidance  technologij 

open  and  if 


Architecture  and  technologies  for  resili| 
distributed  attack  detection  systems;  synthl 
and  cooperative  recovery 


bl 

/  Resilience  in 

/  large  scale  and 

id\ 

/  complex 

systems 

active,  self- 
adapting  and 
Autonomous 
content 

’multiple  virtual  identity 
management  of  roles; 
access  control;  privacy 
aware  authentication 
and  authorization;  user 
empowerment  of  rights 
and  obligations 


Mastering 
scale  &  volume 


user 

empowerment, 
digital  asset 
control  and 
management 

r  computing  and  sensor  networks;  network 
assured  security  of  service  provisioning; 
ssets;  ... 


If-adaptability  &  self-healing);  widely 
lility  and  continuity  analysis;  autonomous 
factor  technologies;  ... 

Miniaturization 
of  components, 

ICT  fabric 


Towards  a  dependable  ICT 
[or  Information  Socieb 


NETWORK 

LEVEL 
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More  information? 

•  http://europa.eu.int/comnn/research/securitv 

•  http://www.cordis.lu/securitv 

•  rtd-pasr@cec.eu.int 

•  iacaues.bus@cec.eu.int 
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